CVE-2026-100288

Devolutions Server versions up to 2026.3.5.0 are vulnerable due to the cleartext storage of sensitive information in the database, allowing attackers with read access to extract external identity provider tokens and active session identifiers. This exposure can lead to unauthorized access to user accounts and systems. Organizations using affected versions should prioritize remediation to protect sensitive data and prevent potential breaches.